JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 157.10.7.112

157.10.7.112 was found in our database!

This IP was reported 59 times. Confidence of Abuse is 63%: ?

63%

ISP	BlueBird
Usage Type	Fixed Line ISP
ASN	AS152605
Hostname(s)	mx.bbn.com.pk
Domain Name	bbn.com.pk
Country	🇵🇰 Pakistan
City	Lahore, Punjab

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 157.10.7.112

Whois 157.10.7.112

IP Abuse Reports for 157.10.7.112:

This IP address has been reported a total of 59 times from 33 distinct sources. 157.10.7.112 was first reported on February 14th 2026, and the most recent report was 15 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 applemooz	2026-07-22 15:49:53 (15 hours ago)	WordPress XMLRPC Brute Force Attacks ...	Brute-Force Web App Attack
🇩🇪 ghostwarriors	2026-07-21 14:20:43 (1 day ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-21 14:17:53 (1 day ago)	Fail2Ban: WordPress XML-RPC brute-force attack detected.	Bad Web Bot Web App Attack
🇩🇪 dbmwebdesign	2026-07-21 13:50:05 (1 day ago)	WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail	Brute-Force Web App Attack
🇩🇪 konseptit	2026-07-21 13:48:33 (1 day ago)	(wordpress) Failed wordpress login from 157.10.7.112 (PK/Pakistan/mx.bbn.com.pk)	Brute-Force
🇺🇸 TPI-Abuse	2026-07-21 10:43:31 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 157.10.7.112 (mx.bbn.com.pk): 1 in the last 300 ... show more (mod_security) mod_security (id:240335) triggered by 157.10.7.112 (mx.bbn.com.pk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 06:43:26.031301 2026] [security2:error] [pid 14658:tid 14658] [client 157.10.7.112:53288] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 157.10.7.112 (+1 hits since last alert)\|d365geek.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "d365geek.com"] [uri "/xmlrpc.php"] [unique_id "al9NTnukxPK7PUqxDqF2gAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-18 15:50:24 (4 days ago)	(mod_security) mod_security (id:240335) triggered by 157.10.7.112 (mx.bbn.com.pk): 1 in the last 300 ... show more (mod_security) mod_security (id:240335) triggered by 157.10.7.112 (mx.bbn.com.pk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 11:50:18.782041 2026] [security2:error] [pid 13089:tid 13089] [client 157.10.7.112:49638] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 157.10.7.112 (+1 hits since last alert)\|kidswow.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "kidswow.com"] [uri "/xmlrpc.php"] [unique_id "alugutNrSDz3V1k9W4ZvKgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-18 14:31:10 (4 days ago)	(mod_security) mod_security (id:240335) triggered by 157.10.7.112 (mx.bbn.com.pk): 1 in the last 300 ... show more (mod_security) mod_security (id:240335) triggered by 157.10.7.112 (mx.bbn.com.pk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 10:31:04.954038 2026] [security2:error] [pid 1401787:tid 1401787] [client 157.10.7.112:28585] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 157.10.7.112 (+1 hits since last alert)\|eye7graphics.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "eye7graphics.com"] [uri "/xmlrpc.php"] [unique_id "aluOKPLbtOm_nhPd8_RbPgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-18 10:56:15 (4 days ago)	(mod_security) mod_security (id:240335) triggered by 157.10.7.112 (mx.bbn.com.pk): 1 in the last 300 ... show more (mod_security) mod_security (id:240335) triggered by 157.10.7.112 (mx.bbn.com.pk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 06:56:06.851534 2026] [security2:error] [pid 32262:tid 32262] [client 157.10.7.112:2119] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 157.10.7.112 (+1 hits since last alert)\|f40ph.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "f40ph.org"] [uri "/xmlrpc.php"] [unique_id "altbxuPlErH-pjsZS-D2CQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-17 15:16:57 (5 days ago)	[redacted] 157.10.7.112 - - [17/Jul/2026:17:16:12 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Je ... show more [redacted] 157.10.7.112 - - [17/Jul/2026:17:16:12 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.1)" [redacted] 157.10.7.112 - - [17/Jul/2026:17:16:23 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 157.10.7.112 - - [17/Jul/2026:17:16:33 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 157.10.7.112 - - [17/Jul/2026:17:16:44 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.0; WordPress/6.2; http://site37302975.com" [redacted] 157.10.7.112 - - [17/Jul/2026:17:16:56 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.1)" ... show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 13:18:08 (5 days ago)	(mod_security) mod_security (id:240335) triggered by 157.10.7.112 (mx.bbn.com.pk): 1 in the last 300 ... show more (mod_security) mod_security (id:240335) triggered by 157.10.7.112 (mx.bbn.com.pk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 09:18:04.475293 2026] [security2:error] [pid 10805:tid 10805] [client 157.10.7.112:60322] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 157.10.7.112 (+1 hits since last alert)\|thebrotherhoodlounge.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "thebrotherhoodlounge.com"] [uri "/xmlrpc.php"] [unique_id "alorjJ0Mhp_gBGcQRJv-SgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 12:32:57 (5 days ago)	(mod_security) mod_security (id:210730) triggered by 157.10.7.112 (mx.bbn.com.pk): 1 in the last 300 ... show more (mod_security) mod_security (id:210730) triggered by 157.10.7.112 (mx.bbn.com.pk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 08:32:53.435590 2026] [security2:error] [pid 1075403:tid 1075403] [client 157.10.7.112:54492] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|lertap5.com\|F\|2"] [data ".lertap5.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "lertap5.com"] [uri "/Nursing2017/HTML/www.lertap5.com"] [unique_id "alog9SX07AJyyU7dr2uRvQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 12:10:38 (5 days ago)	(mod_security) mod_security (id:240335) triggered by 157.10.7.112 (mx.bbn.com.pk): 1 in the last 300 ... show more (mod_security) mod_security (id:240335) triggered by 157.10.7.112 (mx.bbn.com.pk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 08:10:31.634836 2026] [security2:error] [pid 15709:tid 15709] [client 157.10.7.112:22181] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 157.10.7.112 (+1 hits since last alert)\|fusteriafontane.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "fusteriafontane.com"] [uri "/xmlrpc.php"] [unique_id "alobtw70-AjTxyc-mUXQ0gAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Vegascosmetics	2026-07-16 10:18:19 (6 days ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host
🇲🇾 Rizzy	2026-06-11 15:45:19 (1 month ago)	Multiple WAF Violations	Brute-Force Web App Attack

Showing 1 to 15 of 59 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 203.188.189.73

🇳🇱 195.178.110.30

🇳🇱 193.176.31.248

🇺🇸 193.36.224.245

🇻🇳 171.231.188.193

🇺🇸 93.157.28.11

🇫🇷 91.231.89.85

🇩🇪 88.130.223.135

🇺🇸 74.7.242.138

🇬🇧 35.203.210.130

🇩🇪 4.184.121.217

🇮🇳 2409:40e0:1053:2bd3:44ef:d109:ee22:be02

🇨🇳 223.166.247.78

🇩🇪 217.181.92.81

🇺🇸 216.26.224.102

🇩🇪 209.50.181.165

🇮🇳 205.254.184.140

🇵🇦 190.141.8.190

🇧🇷 181.214.221.233

🇮🇹 172.213.144.209